HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 7, 2017.
- Organization as reported
- Peachtree Neurological Clinic, P.C., GA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- July 7, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14134, row:5273)
- Archived copy
- Held in the private archive (provenance)
In December 2017, OCR initiated a compliance review of Peachstate to determine its compliance with the HIPAA Privacy and Security Rules. OCR’s investigation found systemic noncompliance with the HIPAA Security Rule, including failures to conduct an enterprise-wide risk analysis, implement risk management and audit controls, and maintain documentation of HIPAA Security Rule policies and procedures. “Clinical laboratories, like other covered health care providers, must comply with the HIPAA Security Rule. The failure to implement basic Security Rule requirements makes HIPAA regulated entities attractive targets for malicious activity, and needlessly risks patients’ electronic health information,” said Robinsue Frohboese, Acting OCR Director. “This settlement reiterates OCR’s commitment to ensuring compliance with rules that protect the privacy and security of protected health information.” In addition to the monetary settlement, Peachstate has agreed to a robust corrective action plan that includes three years of monitoring. The resolution agreement and corrective action plan may be found at: https://www.hhs.gov/sites/default/files/peachstate-ra-cap.pdf - PDF*.